[j-nsp] config help

Stefan Fouant sfouant at shortestpathfirst.net
Mon Oct 10 09:25:52 EDT 2011


Haha looks like Robert already responded to you... At least it's nice to know I'm not crazy and someone else would give you similar advice... :-b

Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks

Follow us on Twitter @JuniperEducate

Sent from my iPad

On Oct 10, 2011, at 9:19 AM, Stefan Fouant <sfouant at shortestpathfirst.net> wrote:

> If you are using EX Series, take a look at PVLANs - http://www.juniper.net/techpubs/en_US/junos10.0/topics/concept/private-vlans-ex-series.html
> 
> This allows you to split broadcast domains into separate isolated broadcast subdomains to constrain connectivity while at the same time keeping devices in the same subnet and thereby reducing your overall IP address utilization.
> 
> HTHs.
> 
> Stefan Fouant
> JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
> Technical Trainer, Juniper Networks
> 
> Follow us on Twitter @JuniperEducate
> 
> Sent from my iPad
> 
> On Oct 10, 2011, at 4:59 AM, Richard Zheng <rzheng at gmail.com> wrote:
> 
>> Hi,
>> 
>> Here is our setup. Customer A comes in on vlan 2001, customer B on vlan 2002
>> and etc. We may uses separate subnets for each vlan. However it wastes lots
>> of IPs. Is there a way to use the same subnet, e.g. vlan 2001 uses IP
>> 10.0.0.10, and vlan 2002 uses IP 10.0.0.11 and 10.0.0.12. How about use
>> 10.0.0.1/24 as loopback, enable proxy-arp on each vlan, then put a filter on
>> each interface to only allow assigned IP to go through?
>> 
>> Would this work on M7i/M10i?
>> 
>> Thanks,
>> Richard
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list